When a license is oversubscribed, an email will be sent to the default email address configured in Unomaly with a message that the license has been exceeded. Unomaly will not accept log events from systems that exceed the license limit, but they will be added as disabled. You are then free to change which systems should be enabled or disabled, as long as the number of active systems are within the license limit.